$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/4A223A5B1E4D12F5B68F4323EFD36C29DDD9C27A.cer File: 4A223A5B1E4D12F5B68F4323EFD36C29DDD9C27A.cer (raw, json) Hash identifier: ezYAe5C3yWMHjNP5exA2Fhn/M0V462WbRkJwyTjoYDA= Subject key identifier: 4A:22:3A:5B:1E:4D:12:F5:B6:8F:43:23:EF:D3:6C:29:DD:D9:C2:7A Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5A84E054F72BDB03B82C1AC29D5AD616063A4993 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/DAMSWocuPcqYaidaF4fb1Agcx7zsuy9zc7PC16VSuxyR/0/4A223A5B1E4D12F5B68F4323EFD36C29DDD9C27A.mft caRepository: rsync://rpki-repo.registro.br/repo/DAMSWocuPcqYaidaF4fb1Agcx7zsuy9zc7PC16VSuxyR/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 03 Sep 2026 14:26:08 +0000 Certificate not after: Thu 02 Sep 2027 14:31:08 +0000 Subordinate resources: AS: 267289 IP: 45.233.56.0/22 IP: 2804:4b30::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 12 Oct 2026 08:12:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:84:e0:54:f7:2b:db:03:b8:2c:1a:c2:9d:5a:d6:16:06:3a:49:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 3 14:26:08 2026 GMT Not After : Sep 2 14:31:08 2027 GMT Subject: CN=4A223A5B1E4D12F5B68F4323EFD36C29DDD9C27A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:42:1a:c6:84:80:5a:e8:9b:4c:0e:e8:24:b1: bc:1d:96:90:cd:b6:a7:33:6f:90:66:8c:82:7a:7a: e7:64:24:05:61:10:48:17:7c:be:df:62:54:2b:f9: a8:59:02:b8:23:6e:7b:1a:a8:e1:91:b3:82:35:b3: 10:68:6a:8b:ca:4a:10:4d:39:4c:49:70:a8:a9:ee: f5:dd:a3:b7:16:8f:6e:b2:5c:77:34:db:c5:81:fe: b3:98:44:87:87:17:f2:4a:52:54:6a:72:34:01:92: 1e:60:6f:82:1d:24:ed:85:a9:9d:03:f6:54:cc:95: b3:b6:bd:2a:6a:d7:ea:40:ac:9e:5a:87:d7:df:9d: e3:6a:c9:08:25:41:16:9d:0b:b8:24:a3:32:ff:9a: 6c:4c:38:f1:a5:e0:ff:cf:70:21:d0:b8:1c:5f:c5: 2f:11:0b:2c:0a:cb:54:6a:8b:4a:56:5a:49:a0:82: 33:31:60:30:78:16:5a:8d:e2:f8:ff:3b:11:46:74: 8f:fe:16:12:0f:d1:7d:74:24:23:26:87:ce:42:71: 7c:d1:8d:1f:56:e2:12:66:4c:97:ca:1c:20:d1:44: 1b:78:70:a8:b5:77:34:38:19:10:f0:0f:b3:82:dd: ca:e7:b6:4b:90:8a:21:e6:85:4e:d9:34:98:b0:26: 3c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4A:22:3A:5B:1E:4D:12:F5:B6:8F:43:23:EF:D3:6C:29:DD:D9:C2:7A X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/DAMSWocuPcqYaidaF4fb1Agcx7zsuy9zc7PC16VSuxyR/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DAMSWocuPcqYaidaF4fb1Agcx7zsuy9zc7PC16VSuxyR/0/4A223A5B1E4D12F5B68F4323EFD36C29DDD9C27A.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.233.56.0/22 IPv6: 2804:4b30::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267289 Signature Algorithm: sha256WithRSAEncryption 67:4b:1b:7d:be:37:73:68:ad:59:e6:fd:6b:45:b9:88:59:f9: 1a:5a:65:4a:24:4a:db:87:d6:76:82:c7:f7:98:e7:d9:3d:4d: 43:1e:df:d0:d4:a2:94:42:98:01:ad:ea:fe:d8:2b:2c:26:70: 4f:f6:f7:73:dc:f6:46:15:d5:c7:9e:38:d6:5d:84:d6:9a:54: 37:39:60:fe:b2:46:29:f9:e8:97:b6:f1:38:73:32:82:8f:38: 63:ea:ea:50:05:fe:18:2f:5f:aa:b6:f6:aa:7a:a2:85:f5:5f: 3e:5a:23:32:db:2f:70:81:47:fb:c9:29:79:71:c9:47:53:68: d8:37:60:93:c3:a2:bc:96:f3:df:e5:a3:d3:93:78:ad:57:af: 92:9a:bd:bd:52:83:21:3c:c1:cc:f2:ad:8a:45:b2:d2:22:8a: bc:c3:d6:0b:2f:11:8d:f6:59:9a:90:8d:c0:c8:bc:01:66:66: 4e:e6:f4:71:92:d1:77:7a:0d:f3:7a:81:e4:83:2d:91:7b:1e: d6:60:42:47:b4:3d:8a:04:d4:05:14:c1:62:d2:f5:84:bb:3f: 23:bb:e3:97:b9:2b:1b:8e:3f:87:13:4f:bf:b0:ab:ea:db:5f: 7c:d3:b9:ca:cd:34:92:46:db:d1:0a:c5:19:e5:c6:18:06:0a: c4:11:9f:df -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUWoTgVPcr2wO4LBrCnVrWFgY6SZMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA5MDMxNDI2MDhaFw0yNzA5MDIxNDMxMDhaMDMxMTAvBgNV BAMTKDRBMjIzQTVCMUU0RDEyRjVCNjhGNDMyM0VGRDM2QzI5REREOUMyN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWQhrGhIBa6JtMDugksbwdlpDN tqczb5BmjIJ6eudkJAVhEEgXfL7fYlQr+ahZArgjbnsaqOGRs4I1sxBoaovKShBN OUxJcKip7vXdo7cWj26yXHc028WB/rOYRIeHF/JKUlRqcjQBkh5gb4IdJO2FqZ0D 9lTMlbO2vSpq1+pArJ5ah9ffneNqyQglQRadC7gkozL/mmxMOPGl4P/PcCHQuBxf xS8RCywKy1Rqi0pWWkmggjMxYDB4FlqN4vj/OxFGdI/+FhIP0X10JCMmh85CcXzR jR9W4hJmTJfKHCDRRBt4cKi1dzQ4GRDwD7OC3crntkuQiiHmhU7ZNJiwJjy5AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRKIjpbHk0S9baP QyPv02wp3dnCejAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vREFN U1dvY3VQY3FZYWlkYUY0ZmIxQWdjeDd6c3V5OXpjN1BDMTZWU3V4eVIvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RB TVNXb2N1UGNxWWFpZGFGNGZiMUFnY3g3enN1eTl6YzdQQzE2VlN1eHlSLzAvNEEy MjNBNUIxRTREMTJGNUI2OEY0MzIzRUZEMzZDMjlEREQ5QzI3QS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLek4MA0EAgACMAcDBQAoBEswMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQUGTANBgkqhkiG9w0BAQsFAAOCAQEAZ0sbfb43c2itWeb9 a0W5iFn5GlplSiRK24fWdoLH95jn2T1NQx7f0NSilEKYAa3q/tgrLCZwT/b3c9z2 RhXVx5441l2E1ppUNzlg/rJGKfnol7bxOHMygo84Y+rqUAX+GC9fqrb2qnqihfVf PlojMtsvcIFH+8kpeXHJR1No2Ddgk8OivJbz3+Wj05N4rVevkpq9vVKDITzBzPKt ikWy0iKKvMPWCy8RjfZZmpCNwMi8AWZmTub0cZLRd3oN83qB5IMtkXse1mBCR7Q9 igTUBRTBYtL1hLs/I7vjl7krG44/hxNPv7Cr6ttffNO5ys00kkbb0QrFGeXGGAYK xBGf3w== -----END CERTIFICATE-----Generated at Sun Oct 11 09:21:31 2026 by rpki-client